Skip to content
OpenAdvisories

Archive

13 June 2021

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.1
    CVE-2021-23394 Public exploit EPSS 19%

    Remote Code Execution (RCE)

    The package studio-42/elfinder before 2.1.58 are vulnerable to Remote Code Execution (RCE) via execution of PHP code in a .phar file. NOTE: This only applies if the server parses .phar files as PHP.